NVD

Id
54398  
Name
CVE-2007-2231  
Description
Directory traversal vulnerability in index/mbox/mbox-storage.c in Dovecot before 1.0.rc29, when using the zlib plugin, allows remote attackers to read arbitrary gzipped (.gz) mailboxes (mbox files) via a .. (dot dot) sequence in the mailbox name.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-04-25  
Modified Date
2012-11-05  
Seq
2007-2231  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
275898 54398 CVE-2007-2231 http://dovecot.org/doc/NEWS  View
275899 54398 CVE-2007-2231 [dovecot-cvs] 20070330 dovecot/src/lib-storage/index/mbox mbox-storage.c, 1.145.2.14, 1.145.2.15  View
275900 54398 CVE-2007-2231 [dovecot-news] 20070330 Security hole #3: zlib plugin allows opening any gziped mboxes  View
275901 54398 CVE-2007-2231 oval:org.mitre.oval:def:10995  View
275902 54398 CVE-2007-2231 DSA-1359  View
275903 54398 CVE-2007-2231 SUSE-SR:2007:008  View
275904 54398 CVE-2007-2231 RHSA-2008:0297  View
275905 54398 CVE-2007-2231 20070418 rPSA-2007-0074-1 dovecot  View
275906 54398 CVE-2007-2231 23552  View
275907 54398 CVE-2007-2231 USN-487-1  View
275908 54398 CVE-2007-2231 ADV-2007-1452  View
275909 54398 CVE-2007-2231 dovecot-mboxstorage-directory-traversal(34082)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52483 JVNDB-2007-001175 Dovecot の index/mbox/mbox-storage.c におけるディレクトリトラバーサルの脆弱性 Dovecot の index/mbox/mbox-storage.c には、zlib プラグインを使用した場合、任意のgzip で圧縮されたメールボックスを読み取られる脆弱性が存在します。 CVE-2007-2231 25586 CVE-2007-2231 54398 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001175.html 2007-04-25 2008-09-08 View